Upgrade errors (1.1.8 to 1.1.9)

[lyrae]

Hi there.

When I try to click the link to "install this patch (click here to install) to update your version of SMF to 1.1.9." (on the main Packages page) I get "Test successful" for every file. When I click the following button to "Install now" I get this error:

"Your session timed out while posting. Please go back and try again."

If I try to install it as a mod, ie. click "Install mod" in the packages list, I get this error:

"Session verification failed. Please try logging out and back in again, and then try again. "

I have tried logging out and back in again several times.

I am using Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.10) Gecko/2009042523 Ubuntu/9.04 (jaunty) Firefox/3.0.10.

Here is PHPinfo:
http://stillepost.ca/boards/phpinfo.php

Any help would be appreciated! Thanks!

[JBlaze]

You can update to the latest version which includes the security patch by opening this topic and downloading the patch.

Additionally, if you run into an error on install, you can parse the manual install instructions. Just click on your respective version.

[lyrae]

Thanks for your reply, Jblaze.

I tried two of the packages listed in the thread you linked. (It isn't terribly clear which one is needed.)

modified_1-1-8_1-1-9.zip
When I download and then upload the file myself (using the Package Manager) I get the error "The package you tried to upload either is not a valid package or has become corrupted." When I upload it using my own FTP client it doesn't appear in the packages list at all.

smf_patch_1.0.17_1.1.9_2.0-RC1-1.zip
When I download and then upload this package (whether through the Package Manager OR via my FTP client) it appears in the list just fine but when I try to install it I get the "session verification" error.

I have no mods installed other than past version updates; should I really have to manually make all these changes to update my forum? Download all the files and find-and-replace code to make the changes? That doesn't seem right.

Incidentally, the changes recommended in this thread (linked in the thread you provided) have already been made at some point, perhaps in the last update?

Small rant: I've had nothing but problems with the package manager from the beginning, which you can probably glean from a few of my past posts. There has always been some unmentioned requirement (a permissions issue, needing a temp folder, etc etc etc) that didn't come up in any error messages but which I managed to eventually figure out using the forum or my own persistence. Then for a few versions the package manager didn't even load for me, due to my server's version of PHP I believe. I also posted about that. The last update -- to 1.1.18 -- was the very first time in four years of using SMF that I was able to click the link and get updated, just like that, the way it is supposed to work. I really thought my problems were over, and now this! It's pretty frustrating. I really appreciate your help.

[Aleksi "Lex" Kilpinen]

Go to http://custom.simplemachines.org/upgrades/ and download the 1.1.8 to 1.1.9 file,
and try through the package manager once more, if it doesn't work, try the same file so that you upload it to your packages directory manually, and see if it will work better.

After this, if it didn't work - please post the exact errors you get

[lyrae]

I've done both ways already, but I'll go through the steps for clarity:

- Downloaded this at the link "SMF 1.1 * SMF 1.1.8 to SMF 1.1.9 — Download".
- Uploaded it via the download packages screen of the package manager
- Was returned to the list of packages, and clicked apply mod
- Got list of files all indicating test successful
- Clicked on install now at the bottom of that list, got the following error:

An Error Has Occurred!
Your session timed out while posting. Please go back and try again.



- Went to FTP and uploaded the same file, overwriting the one uploaded via package manager
- Went back to browse packages to find it in the list
- Clicked on apply mod, got following error:

An Error Has Occurred!
Session verification failed. Please try logging out and back in again, and then try again.

Just want to note again that I did log out and back in again, etc.

No error comes up in either the SMF error log or my server error log.

What do you think?

[Norv]

Could you please attach your Sources/Packages.php?

[lyrae]

OK --

(Oh, and just a quick note: I also tried after deleting my cookies. No go. Same error.)

[lyrae]

Here is something really weird that I'm observing.

I created the temp directory before,but today when I went to the packages directory via FTP there was no temp directory. I re-created it.

Just now I went back to that directory and again, the temp directory was gone. So I re-created it, then clicked around the package manager again, then just checked on it now.

It seems that when I click the link at the main package manager page which says "A few security vulnerabilities have been identified in SMF 1.1.8. You can install this patch (click here to install) to update your version of SMF to 1.1.9."
the temp folder somehow gets deleted.

Is that not weird?

[N3RVE]

There's a mod (No Temp Directory Removal) that addresses this issue, it disables SMF's ability to remove the "temp" dir after a mod is installed/ uninstalled. Try that out and get back to us

-[n3rve]

[lyrae]

"An Error Has Occurred!
Your session timed out while posting. Please go back and try again. "



Notes:
- This happens whether I use FTP or the Package Manager to put it on the server.
- The temp folder is deleted *before* the changes are tested -- when the list of tested files comes up, the folder is already gone. I re-created it at that point, before clicking "install now".
- If you're certain that the sessions error is related to this, I will add the NoTempDir mod manually.

[Aleksi "Lex" Kilpinen]

Have you been able to fix this?

If not, see your cookie settings (In server settings of your AdminCP) and tell me how these are set

Enable local storage of cookies
Use subdomain independent cookies
Use database driven sessions
Seconds before an unused session timeout

[lyrae]

Nothing's changed. Still busted. Thanks for helping, though.

Enable local storage of cookies Yes
Use subdomain independent cookies Yes
Use database driven sessions Yes     
Seconds before an unused session timeout 2880

These look OK?

[Sel_888]

See... now I don;t understand what you are going through. I myself had NO CHANCE of doing any of this upgrade to 1.1.9 through package manager.

Why don't you download small upgrade package and then follow the instructions, which entails unzipping the contents, and FTPing it all up to the main directory of your forum. It will overwrite your files, but if you aren't heavily laden with mods (uninstall them before starting and BACKUP ALL), then you will be guided through when you go to www.yourdomain.com/yourforum/upgrade.php it will step you through easily for you.

hope that helps..... just avoid using package manager all together.

[lyrae]

I will probably do that, but I would like to solve the issue with the package manager. And not just because I'm stubborn (though I am!) but also because it will benefit other users if it gets sorted out.

(I think a really good step, though, would be to have better error handling -- either in the server error log, or in the regular SMF error log, or in a separate administrator error log, or even just for the package manager to throw back something more accurate. As examples, the two problems I had in the past, with insufficient permissions and with the lack of a /packages/temp, I eventually solved, but there were no error messages that related in any way to what the actual problem was.

Maybe I should be posting a feature request.)

[Aleksi "Lex" Kilpinen]

Otherwise the settings look good, but I seem to remember you shouldn't use local and subdomain independent at the same time. I'm not exactly sure though, but try turning off the subdomain independent cookies. After that clear your temporary files and cookies, login again and try the package manager again.

[Sel_888]

I personally don't have too much success with package manager with any upgrades with the forum... but they work with mods. Weird, I know.
I believe that it's a server issue... and I have no idea where to start or approach all of that.

PS, lyrae... make sure you read the 'readme.html' after you unzip... it will tell you how to do everything.

Good luck..... I personally had some issues with upgrading... one in particular was the error of outdated language files......
check out my message here for the issue, but there is the link in order to resolve it.

Lemme know how it went!

[lyrae]

Otherwise the settings look good, but I seem to remember you shouldn't use local and subdomain independent at the same time. I'm not exactly sure though, but try turning off the subdomain independent cookies. After that clear your temporary files and cookies, login again and try the package manager again.

But if I turn off subdomain-independent then I *have* to turn off local.

Enable local storage of cookies
(SSI won't work well with this on.)
   
Use subdomain independent cookies
(turn off local cookies first!)

[Sel_888]

Enable local storage of cookies
(SSI won't work well with this on.)
   
Use subdomain independent cookies
(turn off local cookies first!)

That is saying to you that in order for you to "use subdomain independent cookies", you HAVE to have off local cookies.

You have to choose one, or the other. not both....
I reccomend using the subdomain independent....

[Norv]

What it tries to say is that if you want to have subdomain independent cookies (i.e., checked: use cookies for yourdomain.com), then you should turn off the local cookies (i.e. unchecked).

[lyrae]

Oh, ha, I am sleep-deprived!

I would prefer not to turn off subdomain-independent cookies because lots of users come to the site through a old temporary URL which was on a subdomain, and I don't want to break their cookies. But I'll try...